commit:     7ec605c4b65aee2fa1981227c221502063c252d4
Author:     Andreas Sturmlechner <asturm <AT> gentoo <DOT> org>
AuthorDate: Fri Jan 17 02:32:16 2020 +0000
Commit:     Andreas Sturmlechner <asturm <AT> gentoo <DOT> org>
CommitDate: Fri Jan 17 02:38:35 2020 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7ec605c4

dev-libs/zziplib: Fix multiple security vulnerabilities

- CVE-2018-7725
- CVE-2018-7726
- CVE-2018-16548
- CVE-2018-17828

Patches fetched from openSUSE, many thanks.

Bug: https://bugs.gentoo.org/614040
Package-Manager: Portage-2.3.84, Repoman-2.3.20
Signed-off-by: Andreas Sturmlechner <asturm <AT> gentoo.org>

 dev-libs/zziplib/Manifest                  | 1 +
 dev-libs/zziplib/zziplib-0.13.69-r1.ebuild | 6 ++----
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/dev-libs/zziplib/Manifest b/dev-libs/zziplib/Manifest
index 75d60a5e23b..9c8fa1075fe 100644
--- a/dev-libs/zziplib/Manifest
+++ b/dev-libs/zziplib/Manifest
@@ -1,3 +1,4 @@
 DIST zziplib-0.13.69-html.tar.xz 152536 BLAKE2B 
05f14b2e6d2e3af4488096eabc1614222cb9607e832618e7534cb55a022f2ba3d2c6f8c6337f4bf9e80a350e43eb05a4c1708b63efa5e0ed10297a5f19ec7adb
 SHA512 
211a83594d4043a29472f9c556d72ad486e40f28d55426b970b8b0617aca76f9dcbd4a3ca5991df943dfac1a1cab623b19aa04fb6ef7807a7740730e01926205
 DIST zziplib-0.13.69-man.tar.xz 10988 BLAKE2B 
2c3c5cfd17b3d3e17a3e72031b2246e32c9fe471b9578a4717c128725493054ceafc34763a763d31cf5532f082a596a6bceb8e417ef70476a59f4daa0a14b587
 SHA512 
5a804896a2d06b1d32d6b8715ffdb374ff7179145d033e919acecd46426dad3e44d4889adabce33e7f6bbc18e2b70b50a8a059498bf4f1f3d6844dda90c33c7e
+DIST zziplib-0.13.69-patches.tar.xz 5000 BLAKE2B 
4612052bb8a312831daec9283cad8593b2161e2acd76122a982339154cd76d58b5398c61f605e3e29e0f63399c9a176710f95a1e6632ff4e1249ac596978006b
 SHA512 
16190e20b8c722f3aee8e77ef7cc24026976b067402430c833d21761a13e32ed5f2eff543a2c13469e442d01c2ed5ae373badd6b8851c962852d6c09620a0d91
 DIST zziplib-0.13.69.tar.gz 1132204 BLAKE2B 
92e9f5e95665c7a47d1e472f570402e3c174d404abf461bed644ea8a37ff7661ee98b8fa241728aae375e32c470f2f48a817f72410eeda81a6a3be6e6bdb2635
 SHA512 
ade026289737f43ca92a8746818d87dd7618d473dbce159546ce9071c9e4cbe164a6b1c9efff16efb7aa0327b2ec6b34f3256c6bda19cd6e325703fffc810ef0

diff --git a/dev-libs/zziplib/zziplib-0.13.69-r1.ebuild 
b/dev-libs/zziplib/zziplib-0.13.69-r1.ebuild
index 54f0d278073..582884e002c 100644
--- a/dev-libs/zziplib/zziplib-0.13.69-r1.ebuild
+++ b/dev-libs/zziplib/zziplib-0.13.69-r1.ebuild
@@ -9,6 +9,7 @@ inherit autotools libtool flag-o-matic python-any-r1
 DESCRIPTION="Lightweight library for extracting data from files archived in a 
single zip file"
 HOMEPAGE="http://zziplib.sourceforge.net/";
 SRC_URI="https://github.com/gdraheim/${PN}/archive/v${PV}.tar.gz -> ${P}.tar.gz
+       https://dev.gentoo.org/~asturm/distfiles/${P}-patches.tar.xz
        https://dev.gentoo.org/~asturm/distfiles/${P}-man.tar.xz
        doc? ( https://dev.gentoo.org/~asturm/distfiles/${P}-html.tar.xz )"
 
@@ -32,10 +33,7 @@ DEPEND="
 "
 RDEPEND="${DEPEND}"
 
-PATCHES=(
-       "${FILESDIR}"/${P}-SDL-test.patch
-       "${FILESDIR}"/${P}-disable-docs.patch
-)
+PATCHES=( "${WORKDIR}"/${P}-patches )
 
 src_prepare() {
        default

Reply via email to